At least one certificate is not valid (Certificate failed validation because it could not be loaded).

app 0

I'm trying to set up a custom domain api.mysite.com to cloudflares proxy service, I'm now trying to upload my custom .pfx that has been tested and opens fine in openssl, cert, private key and password are all set. Though I keep getting "At least one certificate is not valid (Certificate failed validation because it could not be loaded)." When I try and add the certificate to my private key certificate for my custom domain.

VenkateshDodda-MSFT 19,646 Reputation points Microsoft Employee

2023-05-08T09:50:18.6466667+00:00
@app Thank you for reaching out to Microsoft Q&A.

We noticed your feedback that the above answer was not helpful.
Thank you for taking time to share feedback.

Based on the description shared, we have understood that you are trying to create/add private certificate to your App service. In order to add private certificate, you have to meet the following requirements.

Exported as a password-protected PFX file, encrypted using triple DES.

Contains private key at least 2048 bits long

Contains all intermediate certificates and the root certificate in the certificate chain.

As mentioned here, if your certificate authority provided you with multiple certificates in the certificate chain then you need to merge those certificate and further export to pfx as mentioned here.

Hope this helps.

If you need further help on this, tag me in a comment for further assistance.
app 0 Reputation points

2023-05-08T18:03:53.7366667+00:00

Yes I've recieved the pem and key from cloudflare, and used openssl pkcs12 -export -out mysite.app.pfx -inkey mysite.app.br.key -in mysite.app.br.pem
This passes checks in Openssl as well, when I go to place it in I get the error:
VenkateshDodda-MSFT 19,646 Reputation points Microsoft Employee

2023-05-09T08:45:39.3533333+00:00

@app Thanks for your response.
I wish to engage with you offline for a much closer look and provide a quick and specialized assistance, please send an email with subject line “Attn:Venkatesh|thread title” to AzCommunity@microsoft.com referencing this thread with your Azure subscription ID and WebApp details, I will follow-up with you.

1 answer

risolis 8,711 Reputation points

2023-05-07T21:06:56.7766667+00:00

Hello @app

Thank you for posting this concern on this community.

I just wanted to know if you tried to read as well as consider the following article down below:

https://stackoverflow.com/questions/73001634/azure-app-service-unable-to-validate-pfx-file-certificate-failed-validation-be

I hope that can be useful for you.

Looking forward to hearing from you

Cheers,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
app 0 Reputation points

2023-05-08T00:36:16.81+00:00

Thank you, but the linked SO answer doesn't help, as I'm currently using (www.mysite.app):

openssl pkcs12 -inkey mysite.app.br.key -in mysite.app.br.pem -export -out mysite.app.br.pfx

Steven Heyes 0 Reputation points

2023-05-09T14:38:52.6233333+00:00

I am getting this issue also. I am using a technique i have used for years using internet information services and GoDaddy and today I get the error,"At least one certificate is not valid (Certificate failed validation because it could not be loaded).".
Sign in to comment

Share via

At least one certificate is not valid (Certificate failed validation because it could not be loaded).

1 answer